ACCOUNT SECURITY — READ THIS FIRST WardenGG

[twasfer]

If you downloaded, tested, or used WardenGG while Project Sylvanas was down or if you are still using WGG software:

Change your Discord password immediately.
Changing your password invalidates your current Discord auth token.
Go to User Settings → Devices and log out of every unknown or leftover session.
Run a full malware scan, then delete any WGG-related executables.

The Lua Unlocker contains malicious code designed to steal Discord tokens and spy on users. Treat this as a compromised-machine incident, not just a password reset.

[MafiaKing06]

What are you saying my dude? WardenGG is solid so far

[tamedbeast]

Originally Posted by MafiaKing06

What are you saying my dude? WardenGG is solid so far

You must be late to the news. WGG (Warden GG) was hijacking users' Discord tokens and spying on them for half a year until last week. I don't know if I would call that solid; I don't think many people appreciate them doing that. Who knows what other malicious things they did during those months that weren't caught.

This is why they were banned from both EPVP and other major forums.

[MafiaKing06]

Really? I didnt know this

[tamedbeast]

Originally Posted by MafiaKing06

Really? I didnt know this

You can find them on the not-legit list here, with some files and screenshots



Most of the exposure and evidence were already produced in the Murloc Discord for this event (Murloc didn't have a part in this; the conversation just happened in that Discord).

After their developer, Dizazter, was ousted from their circle, he dumped evidence exposing this; the WGG exe was then analyzed and found to be stealing people's Discord tokens right up until last week.

So if anyone here isn't aware, I strongly urge you to change your Discord password and enable 2FA on your account.

Better yet, format your computers.

[DMA.Union]

Previous WGG user here.
A couple of things happened to me whilst using the WGG unlocker over the span of about 6 months. They could be complete coincidence but are food for thought regardless.

My router got compromised. I had to flash new firmware including the bootloader.

I had my coinbase and wow account hacked.

My credit card info got stolen and the bank alerted me of attempts at transactions based in Europe (where the Devs of WGG are based).

I was stupid enough to be running the computer using the WGG executable on the same network as other devices in the household.

What I did after leaving WGG.

Flashed motherboard bios a few times after CMOS clear.
Full secure nvme wipe and fresh windows install.

Hardened the security on other devices in the household.

I now use my gamiing PC on a completly isolated network seperate from any other device.

[cmurda26]

Jesus these guys were legit freaks man what the hell.

Stick with NilName PV is a good dude

[DMA.Union]

The developers (Runo & Ashokha) have publicly stated in writing on this forum that they knowingly committed a serious criminal offence (hacking people's discord tokens so they access to people's private information such as emails, phone numbers and passwords). In the Country I live this criminal offence carries serious implications:-

Hacking to Commit a Serious Crime

If a hacker breaches a system with the intent to commit a secondary major crime (like multi-million dollar fraud, extortion, or identity theft), the maximum penalty matches the maximum penalty of that target crime. This frequently means 10 to 14 years in prison.

Deploying Ransomware or Malware

Knowingly modifying or deleting data—such as encrypting a company’s or individual's network via ransomware or deploying infostealers—carries a maximum penalty of 10 years

Possessing or Creating Hacking Tools

Even if a major heist isn't fully executed, simply coding, buying, or possessing malware or specialized hacking programs with criminal intent carries up to 3 years in prison.

Law enforcement operates in lockstep with international agencies like Interpol and the FBI. A conviction or active warrant means the hacker will face immediate extradition if caught in a co-operating country.Will have global travel heavily restricted, as an Interpol Red Notice can flag them at international borders.

I'm glad that Runo is now a verified ID seller on Epvp. That will make the job of identifying involved parties much easier for the Federal Police when they subpoena Epvp for this information.

[tamedbeast]

Originally Posted by DMA.Union

The developers (Runo & Ashokha) have publicly stated in writing on this forum that they knowingly committed a serious criminal offence (hacking people's discord tokens so they access to people's private information such as emails, phone numbers and passwords). In the Country I live this criminal offence carries serious implications:-

Hacking to Commit a Serious Crime

If a hacker breaches a system with the intent to commit a secondary major crime (like multi-million dollar fraud, extortion, or identity theft), the maximum penalty matches the maximum penalty of that target crime. This frequently means 10 to 14 years in prison.

Deploying Ransomware or Malware

Knowingly modifying or deleting data—such as encrypting a company’s or individual's network via ransomware or deploying infostealers—carries a maximum penalty of 10 years

Possessing or Creating Hacking Tools

Even if a major heist isn't fully executed, simply coding, buying, or possessing malware or specialized hacking programs with criminal intent carries up to 3 years in prison.

Law enforcement operates in lockstep with international agencies like Interpol and the FBI. A conviction or active warrant means the hacker will face immediate extradition if caught in a co-operating country.Will have global travel heavily restricted, as an Interpol Red Notice can flag them at international borders.

I'm glad that Runo is now a verified ID seller on Epvp. That will make the job of identifying involved parties much easier for the Federal Police when they subpoena Epvp for this information.

They are now permanently banned from the forums AGAIN.

[robolee]

no wonder my old discord account was gone for good along with my gmail...

lucky i was using a disposable account =.=